Syslog server

Syslog server is use for store centralized logs of all running server machine.

It is also called centralized syslog server.

We can create one or more syslog server in a one network.

              Package               = rsyslog

              Daemon                = rsyslog

              Configuration file   = /etc/rsyslog.conf

              Port number          =514

Configuration 

             #vim /etc/rsyslog.conf

 Uncomment here these line 

            UDP syslog reception

            TCP syslog reception 

After that save the file

On clients

           Cron.* @ip of syslog server

           Mail.* @ip of syslog server

           *.* @ IP of syslog server ( for all service logs )

           Authprev.* @ ip of syslog server